Well, TWD is specialising in Micro$oft bashing, as it seems. That's very good. I'm a little
deceived that so many reversers ignore totally Micro$oft's awful applications (and silly
protections). This is a MISTAKE! Micro$oft's programs are extremely overbloated and buggy,
yet they are also SOLD and WIDESPREAD. Let's take account of this simple (if very sad) reality.
Reversing Micro$oft's application is therefore USEFUL for a series of reasons:

1) It could be helpful -say for some far-away forgotten study institute in Africa without any money- to have the
possibility to use the SAME (stupid) applications that all other study institutes all
over the 'developed' world are (unfortunately) using... excel instead of 1-2-3, so to say: not
that it works better (it does not) nor quicker (it does not), but excel is unfortunately,
like it or not, the de facto 'standard' of these aera of software decadence.
2) We could find -reversing deep and reversing well- some of the faul TRICKS that the Micro$oft's
programmers have hidden inside their applications in order to get, say, a complete list of
the software running on a given machine, or to delay a little netscape's browser, or to
send to their sites on line some registration informations without asking you.

(TWD) >

Life is but a dream therefore,
where there is no dream,
there is no life - it's your life

After starting Visual SourceSafe 5.00 and logging in, a window appears and
tells us that only 30 days a remaining, before VSS expires.
Thanx a lot, I finished it and started it again. Before finishing the login,
I set a breakpoint on GetLocalTime and continued.
SoftICE breaks up here :
10037843 8D 44 24 08 lea eax, [esp+18h+var_10]
10037847 50 push eax
10037848 FF 15 34 44 06 10 call ds:GetLocalTime
1003784E 66 8B 44 24 08 mov ax, word ptr [esp+18h+var_10]
10037853 8A 4C 24 0A mov cl, [esp+18h+var_E]
Nice, nice, but not the thing we are looking for. You can look around by pressing
some "^p ret;" in your SoftICE, but this is not the right position, at least not
in the moment.
After carrying on, SoftICE pops up at exact the same position as the last time, but
this time called by another procedure :
100025C7 E8 74 52 03 00 call ?DT_GetCur@@YAJXZ ; http://twdrulez.home.ml.org

Final Notes

Cracking this program was very simple. One breakpoint on GetLocalTime was enough.
Why some one should use this program is very easy to explain. The overbloated
M$ - programs make it necessary.

Ob Duh

I wont even bother explaining you
that you should BUY this target program if you intend to use it for a longer
period than the allowed one. Should you want
to STEAL this software instead, you don't need to crack its protection
scheme at all: you'll
find it on most Warez sites, complete and already regged, farewell.

You are deep inside fravia's page of reverse engineering,
choose your way out: